Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: jZvQTFv9ozTXIFvJBpOWt5T20nUfeyo30fd3KMJ6tlI=
Subject key identifier: D6:95:2A:72:AF:02:5B:0F:71:9C:71:64:DF:4C:E3:AB:AB:53:B8:74
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 019887D6756A1B91AC4B1619F54BBF05737E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0FE0
Signing time: Fri 08 Aug 2025 04:00:35 +0000
Manifest this update: Fri 08 Aug 2025 04:00:35 +0000
Manifest next update: Sat 09 Aug 2025 04:00:35 +0000
Files and hashes: 1: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: 5zTxz+0t644cpaSNXWvUjOgNh/2BuG9TVb8L0pp0y5U=)
2: lPP1CTZE_I869rs5FvdeSS4FA3k.roa (hash: qLXwzivmvmSSh7sbcIlPZozy/8eLL4zZEt9Q9nGGudc=)
3: zanD_Us8dBGhViwVbHdjZ1KnOyY.roa (hash: 8YK5aDnlFgCf1IslrmnzJ2YHYk3ZAoh0qEssJ/f413k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:75:6a:1b:91:ac:4b:16:19:f5:4b:bf:05:73:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Aug 8 04:00:35 2025 GMT
Not After : Aug 9 04:00:35 2025 GMT
Subject: CN=d6952a72af025b0f719c7164df4ce3abab53b874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:52:8d:74:70:a1:fe:07:95:94:42:01:4d:
02:a8:b4:e0:d5:5d:ff:3e:f9:61:0b:1d:8a:0b:96:
1c:9c:ed:b5:60:f6:81:a6:91:4b:4a:bf:57:03:1d:
69:21:7a:15:35:12:14:fa:1d:1a:e5:c4:01:dd:6e:
f8:15:ee:00:14:c8:64:89:59:f7:b5:38:14:c8:fc:
15:93:00:15:81:69:51:34:ba:32:b3:f9:86:1b:c5:
5f:21:ae:fa:ec:cf:79:82:16:c9:90:28:4f:b5:46:
58:36:66:a0:ea:47:95:20:a4:a0:b8:90:60:52:02:
3b:3a:b4:1d:12:7d:b7:a2:d9:26:5a:c0:26:c8:e8:
55:f7:8b:72:bf:5c:bd:7f:90:21:86:e0:53:1c:43:
d5:e2:87:94:94:db:85:64:15:b9:d7:1f:6f:7e:9b:
db:d4:97:e1:6a:e5:fd:9b:c7:ce:b7:a2:e3:2a:bc:
ba:a7:0b:02:29:8f:65:17:0a:47:7f:47:26:f8:c0:
30:cb:4e:c2:a8:d1:6d:b7:b1:cd:7d:c5:40:30:92:
f2:9d:64:c7:d1:73:21:ff:f5:bc:cc:34:63:19:c4:
e2:1c:e3:2f:b1:8f:83:28:60:ed:cd:4a:33:03:1d:
c1:26:57:2d:f9:73:88:02:c0:28:63:0d:88:d3:e8:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:95:2A:72:AF:02:5B:0F:71:9C:71:64:DF:4C:E3:AB:AB:53:B8:74
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c5:86:e0:eb:e9:2f:3e:3c:27:85:d5:a7:21:47:81:75:5b:
03:d6:23:30:05:75:5d:d6:50:1d:f2:eb:13:23:21:07:be:db:
e1:0f:85:35:d5:be:18:44:bb:55:9a:40:fb:e7:ee:cc:67:9c:
66:54:88:e7:90:0f:75:ff:a3:06:cd:da:2c:fa:c9:fc:ec:38:
9c:30:ba:aa:e8:a1:35:67:07:99:ee:6b:7b:20:b9:1d:70:9b:
84:aa:4c:68:48:48:0e:b4:12:48:1c:f0:27:c0:62:61:c5:a3:
ba:4f:20:db:cb:2a:3d:b3:91:96:9d:71:ac:03:ea:81:f4:43:
6a:f5:0a:39:06:58:90:b2:a1:74:ef:5a:c2:9f:8b:30:94:1b:
83:e8:7b:a8:7f:19:96:0a:45:e5:ba:b9:5c:a7:f3:81:09:b9:
70:4b:c5:cc:2b:4d:d8:96:55:5f:96:2a:55:cf:18:92:e6:10:
d2:56:d5:85:66:7c:90:12:8d:29:5c:29:69:b2:c8:06:51:76:
f2:f0:80:0b:f3:41:1d:9a:2e:d2:a2:5f:d3:4c:5e:10:5d:68:
f6:c5:ea:9e:c7:6f:12:9e:19:60:1d:53:9c:13:ae:d6:78:8b:
09:60:6f:57:67:a0:1a:a1:d7:3d:2f:cc:10:e8:a1:1c:e4:95:
df:28:97:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:11:11 2025 by rpki-client